MEDIUM5.5

PYSEC-2026-2523

Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow

Quick fix

PYSEC-2026-2523 — intel-tensorflow: upgrade to the fixed version with the command below.

pip install --upgrade 'intel-tensorflow>=2.12'

Details

Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/intel-tensorflow

Introduced in: 0Fixed in: 2.12

Fixpip install --upgrade 'intel-tensorflow>=2.12'

References

https://nvd.nist.gov/vuln/detail/CVE-2023-27506[ADVISORY]
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00840.html[WEB]
https://pypi.org/project/intel-tensorflow[PACKAGE]
https://github.com/advisories/GHSA-m2f8-v8q4-3m59[ADVISORY]